CVE-2012-0211: Devscripts Devel Team Devscripts

High severity, CVSS 9.3. EPSS: 5.8% chance of exploitation in the next 30 days.

debdiff.pl in devscripts 2.10.x before 2.10.69 and 2.11.x before 2.11.4 allows remote attackers to execute arbitrary code via a crafted tarball file name in the top-level directory of an original (.orig) source tarball of a source package.

Affected products

• Devscripts Devel Team Devscripts: version 2.10.0 only; version 2.10.1 only; version 2.10.3 only; version 2.10.6 only; version 2.10.7 only; version 2.10.8 only; …

Published 2012-06-16. Last modified 2026-06-16.